affinitywater.co.uk

.uk crawl

First seen 2026-05-04 · Last seen 2026-05-04 · ok HTTP/1.1 200 3531 ms crawled 2026-05-11

US · 3.174.113.11 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Affinity Water
Language
en

Open Graph

url
https://affinitywater.co.uk/
title
Affinity Water
description
Affinity Water Corporate Website

Technology

CDN
Amazon CloudFront
Server
AmazonS3
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (2)

  • fonts.gstatic.com×1
  • www.googletagmanager.com×1

Registration

Registrar
Gandi
Created
2012-07-26
Expires
2026-07-26 67 days left
Updated
2025-06-21
Name servers
  • ns-1149.awsdns-15.org.
  • ns-1740.awsdns-25.co.uk.
  • ns-395.awsdns-49.com.
  • ns-783.awsdns-33.net.

DNS records live

NS
  • ns-1149.awsdns-15.org
  • ns-1740.awsdns-25.co.uk
  • ns-395.awsdns-49.com
  • ns-783.awsdns-33.net
MX
  • 0 affinitywater-co-uk.mail.protection.outlook.com
TXT
Show 16 TXT records
  • _0i7jqddiio3hs7587hjtke1z1m3hmse
  • adobe-idp-site-verification=0075583be17fc47ad96ab72044c38ad389c45189a6a017b41bb21353d124cfad
  • amazonses:Tldd6Ctygzq7KXHjwE5lUNe8gfWN19JyGIjTqFqB24c=
  • apple-domain-verification=GKDZzWtPKhsVYDpF
  • ciJc/mHFYucmxSdTo2qI0uC10Ao97E+ninWL1swjnAv5m6rlxHc4Rf/41mhBpL5QkkcfiKwzy7LlNJzil5fxcQ==
  • globalsign-domain-verification=8K03qAkNSICdZtIXSfWbSVG8pohJ_9n0GlNFgG8PCD
  • globalsign-domain-verification=MlWiQAvhOhICyWpqwFEnvYfdWQOjUO7-adTPKOOko3
  • globalsign-domain-verification=jq58KZCLpfLd2ItMKBhJ7nwpo0KQHmeN5Kz79Fq2vq
  • google-site-verification=5VF1Nn7iwoJHiO6D_bOcdGishKBG_WsomNdVt_YHm7w
  • google-site-verification=XqPuGXHa6i8bNX_TQLM0sHyDn-QqINAiBQnIHMiaO4U
  • klaviyo-site-verification=SkPiYD
  • klaviyo-site-verification=TWKTTT
  • sophos-domain-verification=2171a2f6bdbbd717e97acc9bdddadb1335d9f9ac4a2d361270191dab0c611629
  • Gn1x4l9SgxduGJHp1nCdNP9swpSAulUOJX8jejpFM9A=
  • MS=ms74011297
  • MS=ms99598361

Email authentication strong

SPF
v=spf1 include:_u.affinitywater.co.uk._spf.smart.ondmarc.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:a6ad7c42@inbox.ondmarc.com,mailto:dmarc_agg@vali.email; ruf=mailto:a6ad7c42@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600
policy: reject (enforced) · sp=reject
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YkjCJkBzWDvWYT0qwD/rHrKN3OymHsRVZYFtlwKF95EUaZvVfE5z/yTBAC/2qWUjl3fd1g2eqHeZ0…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAM8OwxD67FLv9so4HleaCr4lJUD3PiQYYRNYZnAvxDjBS1p3i3AEhsDR8KM8yy4YHzqGJnJyxlms0…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36
from 2025-09-26 to 2026-10-28
Expires in 161 days

HTTP security headers

Header hygiene 80/100 Checked live page: https://affinitywater.co.uk/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
permissions-policy
geolocation=(self), microphone=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://www.affinitywater.co.uk https://uat.affinitywater.co.uk https://affinitywater.co.uk https://afwl01mstrv22hlprep.dxcloud.episerver.net https://cms.affinitywater.co.uk https://metering.affinitywater.co.uk; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' https://*.dxcloud.episerver.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.gstatic.com https://apis.google.com https://cc.cdn.civiccomputing.com https://cookiecontrol.com https://cdn.siteimprove.com https://analytics.siteimprove.com https://siteimproveanalytics.com https://cdn.reciteme.com https://widgets.reciteme.com https://widget.trustpilot.com https://static.klaviyo.com https://a.klaviyo.com https://connect.facebook.net https://js.adsrvr.org https://insight.adsrvr.org https://secure.adnxs.com https://acdn.adnxs.com https://cdn.ad
strict-transport-security
max-age=31536000; includeSubDomains; preload

Linked from (1)